

Application No. 


Applicant(s) 


Notice of Allowability 


09/987,933 


HAN ET AL. 


Examiner 


Art Unit 






Abdulhakim Nobahar 


2132 





The MAILING DATE of this communication appears on the cover. sheet with the correspondence address- 
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International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 
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Paper No./Mail Date . 
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Allowable Subject Matter 

1 . Claims 1,2,5, 6, 8, 9 and 1 1 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 

The primary reasons for the allowance of the independent claims 1, 6 and 9 are 
the inclusion of the following limitations that are not found in the prior art and they are 
uniquely distinct features. The closest prior art is Comay et al (6,363,489 B1; hereinafter 
Comay) in view of Malan et al (2002/0035698 Al; hereinafter Malan). Comay discloses 
a method and a system for providing security to a network by at least identifying an 
unauthorized user who is attempting to gain access to a node on the network, and 
preferably by then actively blocking that unauthorized user from further iactivities. 
Comay further discloses a step for analyzing the communication for detecting an 
information gathering procedure. Malan teaches a system that protects a publicly 
accessible network services from undesirable network traffic in real-time. Malan also 
teaches that the arriving packets are analyzed and filtered. 

However, these arts, singularty or in combination, fail to anticipate or render the 
following limitation: 

"Claim 1: wherein the processing means, if the data received from the analysis 
means is one associated with the intrusion information, creates an active packet 
associated with the intrusion information and transmits it to another local network, and if 
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the data received from the analysis means is the active packet, analyzes whether the 
active packet is concerned with the intrusion information, and 

wherein if the intrusion is made via an authenticated server, the processing 
means creates a mobile anent, transmits the same to the server and retrieves 
information for the intruder." 

"Claim 6: a2) determining, if there is the packet, whether the packet is one 
associated with the intrusion information, and if so, creating an active packet associated 
with the intrusion information and transmitting it to another local network; 

a3) analyzing, if the packet is the active packet, whether the active packet is 
concerned with the intrusion information; and 

a4) determining whether the intrusion is made via an authenticated server, and if 
so, creating a mobile agent, transmitting the mobile anent to the sen/er and retrieving • 
information for the intruder." 

"Claim 9: a2) determining, if there is the packet, whether the packet is one 
associated with the intrusion information, and if so, creating an active packet associated 
with the intrusion information and transmitting it to another local network; 

a3) analyzing, if the packet is the active packet, whether the active packet is 
concerned with the intrusion information; and 
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a4) determining whether the intrusion is made via an authenticated server, and if 
so, creating a mobile agent, transmitting the mobile anent to the server and retrieving 
information for the intruder." 

3. The dependent claims 2, 5, 8 and 1 1 are allowed because they were originally 
found to include a unique feature not found in the closest abovementioned art. 

4. Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Abdulhakim Nobahar whose telephone number is 571- 
272-3808. The examiner can normally be reached on M-T 8-6. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Abdulhakim Nobahar 
Examiner 

Art Unit 2132 /^c^. 
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